Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: Xoee3U1DnkSwX4WZHADVP0Y5vnoEST0OBsgGv79Netc=
Subject key identifier: 82:43:CE:74:8C:F7:63:65:5B:1D:14:AF:F9:7D:07:CA:3F:93:68:E0
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 01A0DBA94F92665FB37009887F2F3B3D8EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0719
Signing time: Sat 26 Sep 2026 03:01:41 +0000
Manifest this update: Sat 26 Sep 2026 03:01:41 +0000
Manifest next update: Sun 27 Sep 2026 03:01:41 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: sYFGWxEyKzw2/pRpOqiO2pFya8Zs50DV5O3oA56BLsg=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:4f:92:66:5f:b3:70:09:88:7f:2f:3b:3d:8e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Sep 26 03:01:41 2026 GMT
Not After : Sep 27 03:01:41 2026 GMT
Subject: CN=8243ce748cf763655b1d14aff97d07ca3f9368e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:3a:1a:7a:92:3e:d7:10:2d:76:ab:87:13:
ad:d4:a1:9a:f4:80:c9:36:87:d0:dd:b5:1f:5a:91:
2a:48:53:a6:5e:4f:d0:3f:78:b4:5c:e9:70:f5:84:
f5:d2:fb:98:bd:5b:23:66:3c:64:03:30:06:42:64:
6b:4d:50:ef:5c:fa:e3:1d:b7:97:a1:49:f6:ff:2f:
7b:85:7d:16:80:00:18:37:69:ac:c9:f9:cb:9c:38:
ce:95:d6:08:dc:db:42:50:11:55:c4:6d:83:64:86:
42:e6:14:38:cf:4b:29:e7:6a:57:d9:95:b8:75:1e:
7d:69:42:be:6e:72:b2:36:74:d5:bb:46:c8:7f:f1:
d4:dd:90:81:9e:c4:67:56:ca:75:41:3a:bf:e7:07:
b2:86:a3:ba:0f:6d:16:e7:42:cf:f7:2f:48:5b:51:
e3:b1:16:62:92:9f:25:7a:69:b1:65:e9:c4:2e:ee:
98:81:a7:08:f4:ab:33:0f:25:60:af:90:10:10:4e:
0b:7c:c8:dc:c1:74:50:06:a0:45:d4:f4:21:d8:8b:
b0:4f:a3:99:bd:6b:ee:4e:1b:62:19:86:2e:c1:02:
12:7e:63:23:46:6d:a5:5d:79:a6:19:bd:aa:86:38:
30:a4:a7:7d:27:50:82:bc:04:89:5a:0a:fe:ff:6a:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:CE:74:8C:F7:63:65:5B:1D:14:AF:F9:7D:07:CA:3F:93:68:E0
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:a0:ab:55:09:62:9d:ba:08:99:eb:f9:53:1d:aa:13:f9:
75:f9:b5:f4:84:b2:e8:f4:02:73:eb:41:d9:9e:59:71:0f:d5:
a5:5e:50:cd:93:a7:c6:f2:a8:f4:0f:8c:98:90:07:e4:e5:52:
f7:c5:72:8e:c8:1a:3b:1f:16:dc:de:a3:f8:83:3a:db:e7:7e:
e7:c4:5a:33:df:4d:5e:12:7e:30:d6:bc:f5:09:d0:a8:fd:d2:
c7:4d:ab:6b:55:9d:09:78:27:3c:01:2c:9c:d0:60:62:9f:55:
ad:2b:04:7c:f1:90:22:f0:0a:e1:7e:bc:b7:39:0f:57:0a:e9:
bb:af:68:7b:13:95:36:50:06:20:ea:57:cd:2c:bd:65:a9:e5:
87:25:95:04:95:b9:c2:d3:a3:8a:a8:f8:7c:46:95:e7:ef:31:
0b:1a:cc:f7:77:a8:04:47:fd:ae:25:7c:15:95:d3:c2:ff:9a:
f5:35:03:f7:89:ff:96:dd:56:17:7e:60:8b:b5:6e:e8:1a:3c:
2b:4d:ee:af:05:2d:83:13:d1:50:8e:5e:f0:5d:90:33:4a:f9:
76:30:c3:b0:89:87:b9:96:df:b7:0a:7f:fc:b5:94:ba:31:7e:
08:11:0a:59:db:9b:fd:c8:a7:bf:0c:d8:bd:d8:b6:48:b2:e3:
8f:e3:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:55:28 2026 by rpki-client